Daily Open Source Infrastructure Report 22 April 2013 Top Stories Storms in the Midwest have caused hundreds of flight cancellations and flooding along with an evacuation of a hospital due to rising floodwaters. – CNN (See item 5) A U.S. Senator’s office was evacuated and closed due to a suspicious letter delivered to the facility. – Detroit News (See item 26) Authorities in Boston implemented a city-wide lockdown so law enforcement officials could search for a second suspect believed to be involved in the April 15 marathon bombings. – NBC News (See item 35) Officials evacuated over 1,000 residents from the northern Illinois community of Marseilles after nine barges broke free from a tugboat and struck a levee. – Associated Press (See item 38) Fast Jump Menu PRODUCTION INDUSTRIES • Energy • Chemical • Nuclear Reactors, Materials, and Waste • Critical Manufacturing • Defense Industrial Base • Dams SUSTENANCE and HEALTH • Food and Agriculture • Water and Wastewater Systems • Healthcare and Public Health SERVICE INDUSTRIES • Financial Services • Transportation Systems • Information Technology • Communications • Commercial Facilities FEDERAL and STATE • Government Facilities • Emergency Services -1- Energy Sector Nothing to report [Return to top] Chemical Industry Sector Nothing to report [Return to top] Nuclear Reactors, Materials, and Waste Sector Nothing to report [Return to top] Critical Manufacturing Sector 1. April 19, Wall Street Journal – (National) Honda recalling more than 204,000 SUVs and Vans to fix shift mechanism. Approximately 204,169 of certain CR-V sportutility vehicles and Odyssey minivans from the 2012 and 2013 model years, and 2013 Acura RDX SUVs are being recalled by Honda Motor Co to fix a possible flaw in their brake-shift interlock mechanisms. Source: http://blogs.wsj.com/drivers-seat/2013/04/19/honda-recalling-more-than204000-suvs-and-vans-to-fix-shift-mechanism/ [Return to top] Defense Industrial Base Sector Nothing to report [Return to top] Financial Services Sector 2. April 18. SEC News – (Washington, D.C.) SEC charges Chicago-based investment adviser with defrauding CalPERS and other clients. The Securities and Exchange Commission charged the CEO of a Chicago-based investment advisory firm with lying about his investment holdings to attract institutional investors. The CEO agreed to be barred from the securities industry and pay several penalties. Source: http://www.sec.gov/news/press/2013/2013-64.htm?utm_source=feedly 3. April 18. ITN – (International) $15 million in counterfeit US bank notes seized in -2- Peru. Peruvian police seized $15 million in counterfeit bank notes along with one million fake euros and ten million Peruvian soles in a law enforcement operation. Source: http://www.itn.co.uk/World/73953/-15-million-in-counterfeit-us-bank-notesseized-in-peru 4. April 17. WWAY 3 Raleigh – (North Carolina) Wilmington attorney headed to prison for mortgage fraud. A Wilmington-based lawyer was sentenced April 17 to three years in prison for conspiracy to commit mail, wire, and bank fraud amongst other violations after he prepared HUD-1 settlement statements which falsified financing and down payment amounts, property contract price, and other items. The scheme led banks and lenders to issue loans to conspirators in the amount of approximately $15.8 million. Source: http://www.wwaytv3.com/2013/04/17/wilmington-attorney-headed-to-prisonfor-mortgage-fraud&utm_source=feedly [Return to top] Transportation Systems Sector 5. April 19, CNN – (National) Hospital, homes evacuated amid flood threats in Illinois, elsewhere. Severe storms in the Midwest have caused hundreds of flight cancellations and flooding, with one Illinois hospital evacuating patients due to rising floodwaters. Various roads and highways have also been inundated by flash floods around Illinois, Indiana, and elsewhere creating dangerous travel conditions. Source: http://www.cnn.com/2013/04/18/travel/weather/index.html 6. April 18, USA Today – (Illinois) Bad week to fly via O’Hare; cancellations top 2,400. A persistent stormy weather pattern and a computer outage affecting American Airlines operations April 17 prompted Chicago O’Hare International Airport to cancel over 2,400 flights in the past few days. Source: http://www.usatoday.com/story/todayinthesky/2013/04/18/storms-snarlchicago-ohare-flight/2092941/ 7. April 18, Travelers Today – (Florida) Miami International Airport evacuated due to lighter that looked like a grenade. Several security checkpoints at Miami International Airport were closed for 2 hours after authorities screened a suspicious item that turned out to be a cigarette lighter shaped like a grenade. Source: http://www.travelerstoday.com/articles/5890/20130418/miami-internationalairport-evacuated-due-lighter-looked-grenade.htm 8. April 18, KIRO 7 Seattle– (Washington) Alaska Airlines contractor fined for health violations. Bags, Inc., an Alaska Airlines contractor, was fined more than $12,000 for serious safety violations by the Washington Department of Labor and Industries for a number of serious safety violations. Source: http://www.kirotv.com/news/news/alaska-airlines-contractor-fined-healthviolations/nXQS9/ -3- 9. April 18, WOOD 8 Grand Rapids – (Michigan) Flooding washes out Ionia-area bridge. Heavy flooding caused Lincoln Avenue bridge over Bellamy Creek in Michigan to wash out due to rushing water. Other roads within the area were out of commission because of flooding. Source: http://www.woodtv.com/dpp/news/local/ionia_county/ionia-county-floodingeffects-041813 10. April 18, MLive.com – (Michigan) Bad weather leads to accidents, highway closures; flood warning in effect for Jackson County through Friday. A section of Interstate 94 near Mt. Hope in Grass Lake Township was closed for more than 4 hours April 18 after a semi-truck tipped over. Source: http://www.mlive.com/news/jackson/index.ssf/2013/04/bad_weather_leads_to_accident s.html 11. April 18, Fort Lauderdale Sun Sentinel – (Florida) Two accused of stealing copper wiring off streetlights. Two people were arrested and are facing charges after one was caught stealing copper wire off of a street light on Interstate 95 in Hollywood, Florida. Source: http://articles.sun-sentinel.com/2013-04-18/news/fl-copper-theft-arrest20130418_1_copper-wire-copper-thieves-light-pole For another story, see item 35 [Return to top] Food and Agriculture Sector Nothing to report [Return to top] Water and Wastewater Systems Sector 12. April 19. Associated Press – (Iowa) Valve failure causes release of hundreds of thousands of gallons of wastewater in E. Iowa. The Iowa Department of Natural Resources reported as much as 400,000 gallons of untreated wastewater per day is being discharged by the Park View Water and Sanitary District due to valve failure. The wastewater is entering two creeks and eventually into the Wapsipinicon River. Source: http://www.therepublic.com/view/story/28ec8a326b3d434c9a6c2a6a2e12bcbb/IA-Eastern-Iowa-Wastewater 13. April 19. Associated Press – (Illinois; Iowa; Missouri) Midwest flooding expected for several days in Illinois, Iowa, Missouri after storms. After a spring storm unleashed downpours from Oklahoma to Michigan, rivers across several states are expected to rise for several days as the water causes smaller rivers and tributaries to increase above flood stage, forcing evacuations in multiple communities. -4- Source: http://www.huffingtonpost.com/2013/04/19/midwestflooding_n_3114489.html 14. April 18. EPA News – (New Jersey) EPA reaches agreement on the cleanup of the Puchack Well Field Superfund site in Pennasuken Township, New Jersey $23 Million to be spend on protecting drinking water. Two companies will perform a $23 million soil cleanup and reimburse over $10.7 million dollars associated with a New Jersey Superfund site which polluted the ground water on the site and six other public drinking water supply wells nearby. Source: http://yosemite.epa.gov/opa/admpress.nsf/0/8045d2d4c270192c85257b5100528fc9?Op enDocument&utm_source=feedly 15. April 18. Reuters – (Illinois) Heavy rains in Chicago area cause flooding, close roads. Three to seven inches of rainfall over two days led the National Weather Service to issue flash flood warnings April 18 for the entire Chicago area as the rain and flooding shut down parts of three major expressways, delayed commuter trains, cancelled flights, caused a sinkhole which swallowed three cars, closed suburban schools and flooded neighborhood basements. Illinois Governor has declared a state of emergency. Source: http://www.reuters.com/article/2013/04/18/us-usa-weatheridUSBRE93H0UX20130418 16. April 18. Windsor Beacon – (Colorado) Windsor ranch agrees to pay $16,000 after 3-year battle with EPA. The owners of a Windsor, Colorado ranch’s sheep feedlot, agreed to pay a $16,000 penalty for improperly discharging process wastewater into a roadside ditch connected to a reservoir used for fishing, swimming, and boating. Source: http://www.coloradoan.com/article/20130417/WINDSORBEACON01/304170016/Ran ch-agrees-pay-16-000-after-3-year-battle-EPA&utm_source=feedly 17. April 18. WQAD 8 Quad Cities – (Illinois; Iowa) Iowa Army Ammunition Plant discharges untreated wastewater. A pump failure at the Iowa Army Ammunition facility in Middletown, Iowa on April 15 allowed about 100,000 gallons of untreated wastewater to discharge into a tributary of the Skunk River and then into the Mississippi River. Source: http://wqad.com/2013/04/18/iowa-army-ammunition-plant-dischargesuntreated-wastewater/ For another story, see item 5 [Return to top] Healthcare and Public Health Sector 18. April 18, Tucson Northwest Explorer – (Arizona) Marana Healthcare not affiliated with dental clinic under investigation. MHC Healthcare and Marana Health Center -5- operations notified the public that their patients were not affected by a recent statement from the Prima County Health Department regarding the potential risk of blood borne infections after the article referenced a dental clinic in Marana. Source: http://explorernews.com/news/article_b73eca0a-a858-11e2-9e490019bb2963f4.html 19. April 18, Associated Press – (Illinois) Another doctor arrested in hospital investigation. Another physician was arrested April 17 as part of an ongoing investigation of Chicago’s Sacred Heart Hospital where several hospital executives and physicians are accused of committing fraud against Medicare and Medicaid through unnecessary medical procedures and exchanging kickbacks for the referral of patients insured by the federal programs. Source: http://www.timesunion.com/news/crime/article/Another-doctor-arrested-inhospital-investigation-4445868.php 20. April 18, Associated Press – (Pennsylvania) Pa. medical clinic cited for health violations. The Keystone Pain Institute in Pennsylvania was cited by the U.S. Occupational Safety and Health Administration for eight serious health violations and a proposed fine of $46,800 involving infections that can be transmitted by blood. Source: http://www.ctpost.com/news/article/Pa-medical-clinic-cited-for-healthviolations-4445291.php For another story, see item 5 [Return to top] Government Facilities Sector 21. April 19, Philadelphia Inquirer – (Pennsylvania) Arson suspected in Delco high school fire. Penn Wood High School in Lansdowne, Pennsylvania was heavily damaged by a 3-alarm fire and will remain closed for the rest of the academic year after a blaze was ignited April 19. Police are investigating the incident and suspect arson. Source: http://www.fireengineering.com/news/2013/04/19/arson-suspected-in-delcohigh-school-fire.html 22. April 19, Associated Press – (Tennessee) Nashville high school closed after receiving threat, officials say it was posted online. Father Ryan High School in Nashville was closed April 19 and all campus activities were cancelled after receiving a threat that was posted online. Source: http://www.therepublic.com/view/story/7445898893af4354bd66a7a732571243/TN-School-Threat 23. April 18, WBZ-TV 4 Boston – (Massachusetts) Worker killed at Massachusetts Department of Transportation facility. Two people were injured and another suffered fatal injuries after being trapped under a construction housing unit that was portable in a Massachusetts Department of Transportation facility. Authorities are -6- investigating the incident. Source: http://boston.cbslocal.com/2013/04/18/worker-killed-at-massachusettsdepartment-of-transportation-facility/ 24. April 18, KSBW 8 Salinas – (California) Gilroy standoff ends; Cabrillo College Aptos campus declared safe. Cabrillo Colleges’ Aptos campus was evacuated for about 3 hours April 18 before authorities declared it safe after a suspicious package was found outside one of the buildings. Rod Kelley Elementary School in Gilroy was on lockdown for roughly 2 hours after police engaged in a standoff with a suspect at a nearby apartment complex. Source: http://www.ksbw.com/news/central-california/santa-cruz/Gilroy-standoff-endsCabrillo-College-Aptos-campus-declared-safe/-/5738976/19803234/-/1pidju//index.html 25. April 18, Fox News – (California) No bomb found at California college campus following evacuation, police say. California State University, Los Angeles was evacuated and classes were likely cancelled following a telephone bomb threat April 18. After conducting a search and not turning up anything, authorities gave an all-clear. Source: http://www.foxnews.com/us/2013/04/18/california-college-campus-beingevacuated-due-to-emergency/?test=latestnews 26. April 17, Detroit News – (Michigan) U.S. Senator’s office to remain closed after receiving suspicious mail. A U.S. Senator’s office was evacuated April 17 and is closed indefinitely due to a suspicious letter that was delivered to the facility. The staffer that found the piece of mail was sent to the hospital as a precaution and authorities are awaiting test results. Source: http://www.detroitnews.com/article/20130417/POLITICS03/304170427 For another story, see item 35 [Return to top] Emergency Services Sector 27. April 18, KCNC 4 Denver – (Colorado) Inmate, vehicle missing from minimum security prison in Golden. Authorities are searching for a Camp George West inmate that walked away from the Colorado minimum level correction center April 16. Source: http://denver.cbslocal.com/2013/04/18/inmate-vehicle-missing-fromminimum-security-prison-in-golden/ [Return to top] Information Technology Sector 28. April 19, Softpedia – (International) OpGabon: Gabon Ministry of Justice, other government sites attacked by Anonymous. Members of a hacktivist group have -7- disrupted a number of Web sites that belong to the government of Gabon by distributing DDoS attacks. A few participants attempted to utilize a web-based DDoS attack tool to send large amounts of packets in an effort to render the sites inoperable. Source: http://news.softpedia.com/news/OpGabon-Gabon-Ministry-of-Justice-OtherGovernment-Sites-Attacked-by-Anonymous-346887.shtml? 29. April 19, Softpedia – (International) Reddit disrupted by DDOS attack – 4/19/2013. Representatives from Reddit announced the site was the target of a DDoS attack that disrupted service and they are working to mitigate the incident. Source: http://news.softpedia.com/news/Reddit-Disrupted-by-DDOS-Attack-4-192013-346850.shtml? 30. April 19, The H – (International) Facebook closes cross-site scripting holes. Facebook closed a number of cross-site scripting (XSS) holes that were discovered by a security firm after they determined the social media site was vulnerable to attack through their chat feature as well as their check-in and messenger for Windows components. Source: http://www.h-online.com/security/news/item/Facebook-closes-cross-sitescripting-holes-1845850.html 31. April 19, Softpedia – (International) Hackers deface Google Kyrgyzstan and Google Bosnia and Herzegovina. Two hackers have defaced Google Kyrgyzstan and Google Bosnia Herzegovina along with several of their .kg and .ba domains. By breaching the country’s domain registrar, cybercriminals can make it seem as though they have breached a large number of high-profile Web sites. Source: http://news.softpedia.com/news/Hackers-Deface-Google-Kyrgyzstan-andGoogle-Bosnia-and-Herzegovina-346753.shtml? 32. April 19, Softpedia – (International) Websites of 8 US organizations hacked for OpUSA. A hacktivist group is taking credit for defacing 8 U.S. organizations’ Web sites as part of their campaign to go after establishments with ties to the government. Some of the sites have been restored while others were taken offline. Source: http://news.softpedia.com/news/Websites-of-8-US-Organizations-Hacked-forOpUSA-346698.shtml? 33. April 18, Softpedia – (International) Cybercriminals use fake TPG Telecom notifications to spread ZeuS variant. Kaspersky published a spam report and detailed an email campaign that utilizes the Australian telecom company TPG Telecom to distribute a variant of the ZeuS Trojan through an attachment. Source: http://news.softpedia.com/news/Cybercriminals-Use-Fake-TPG-TelecomNotifications-to-Spread-ZeuS-Variant-346510.shtml? 34. April 18, IDG News Service – (International) Russian malware mines bitcoins through botnet. Researchers from a security firm determined a Russian porn site is delivering the malware Fareit to mine victims’ bitcoins while attacking the computer and looking for vulnerabilities upon visiting a Web site. The malware has been circulating for at least 6 months and infects Windows computers. -8- Source: http://www.networkworld.com/news/2013/041913-russian-malware-minesbitcoins-through-268903.html?source=nww_rss& Internet Alert Dashboard To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit their Web site: http://www.us-cert.gov Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and Analysis Center) Web site: https://www.it-isac.org [Return to top] Communications Sector Nothing to report [Return to top] Commercial Facilities Sector 35. April 19. NBC News – (Boston) Boston transit shut down, nearly 1 million sheltering in place amid terror hunt. Authorities implemented a city-wide lock down in Boston including the cancellation of all public school activities, the suspension of transportation services, and the closure of trial courthouses and offices to allow law enforcement officials to conduct a search for a second suspect believed to be involved in the April 15 marathon bombings. Source: http://usnews.nbcnews.com/_news/2013/04/19/17822687-boston-transit-shutdown-nearly-1-million-sheltering-in-place-amid-terror-hunt?lite 36. April 19. Boston Globe – (Boston) Fire at JFK Library caused by discarded smoking material. Though initially believed to be connected to the Boston marathon bombings, a fire at the JFK Presidential Library and Museum was caused by careless disposal of smoking materials. Library representatives said the building will be closed until further notice as the water damage to parts of the building and other fire protection systems were significant. Source: http://www.bostonglobe.com/metro/2013/04/18/jfk-fire-caused-smokingmaterials/Ie17JZl0T0zpSzbMwLuWgL/story.html 37. April 19. Associated Press – (Minnesota) 1 person dead, 2 others are injured in shooting at Shakopee apartment. Police said an April 18 shooting in Shakopee, which left one man fatally shot and two others wounded was not a random act of violence and are investigating the incident with support from the Bureau of Criminal Apprehension. Source: http://www.therepublic.com/view/story/d10c1d9ef5ca4d76a3a8c3462b56eb84/MN-Shakopee-Shooting -9- For another story, see item 24 [Return to top] Dams Sector 38. April 19. Associated Press – (Illinois) More than 1,000 evacuated after barge hits levee. Officials have evacuated as many as 1,500 residents including those in a nursing home from the northern Illinois community of Marseilles after nine barges broke free from a tugboat and struck a levee. Source: http://www.wgem.com/story/22022204/more-than-1000-evacuated-after-bargehits-levee 39. April 18. WHBF 4 Quad Cities – (Illinois; Iowa) Levee fails near Colona. An upstream levee failure after heavy rainfall endangered more than 100 homes in Colona, Illinois shutting down a section of Highway 84 and sending the Green River into more than 80 acres of farmland. A voluntary evacuation of the area was called by officials April 18. Source: http://www.whbf.com/story/22020277/levee-fails-near-colona [Return to top] - 10 - Department of Homeland Security (DHS) DHS Daily Open Source Infrastructure Report Contact Information About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: http://www.dhs.gov/IPDailyReport Contact Information Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS Daily Report Team at (703) 942-8590 Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow instructions to Get e-mail updates when this information changes. Removal from Distribution List: Send mail to support@govdelivery.com. Contact DHS To report physical infrastructure incidents or to request information, please contact the National Infrastructure Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit their Web page at www.us-cert.gov. Department of Homeland Security Disclaimer The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source material. - 11 -